irule allow only one IP to VIP

Ok I had to go with data group

when CLIENT_ACCEPTED {
 Check the data group
if { ! ([class match [IP::client_addr] equals allow_2_IP ]) } {
     Not valid client
    drop
}

}

works fine but if someone have irule which allow only 2 ips it would be great also 🙂